CVE-2015-2374

Published 14 Jul 2015 · Updated 06 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.9%

The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly implement domain-controller communication, which allows remote attackers to discover credentials by leveraging certain PDC access and spoofing the BDC role in a PDC communication channel, aka "Elevation of Privilege Vulnerability in Netlogon."

Affected products

n/a · n/a

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-071 http://www.securityfocus.com/bid/75633 http://www.securitytracker.com/id/1032900